Get in front of buyers and agents at the moment they need a professional partner

Last updated: 18 July 2026

1. About
Realey is operated by Realey Hub Pty Ltd ABN 13 694 586 224, of 490 Northbourne Avenue, Dickson ACT 2602.In this policy, Realey, we, us and our mean that entity. You means any individual whose personal information we handle.Realey is a platform that brings agents, solicitors, mortgage brokers and buyers onto a single hub for a property transaction, from listing or offer through to exchange.This policy explains how we collect, hold, use and disclose personal information, and how you can access it, correct it or complain about how we have handled it.We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

2. The Two Roles We Play
For our own users and site visitors, Realey decides how and why information is handled. Realey is accountable to you directly for that information.For information a professional puts into a deal, the agent, solicitor or broker running that matter decides what goes in and who sees it. Realey holds and processes it on their instructions so the transaction can proceed.If your information was uploaded to a deal by a professional acting for you or for another party, that professional's own privacy policy governs why they collected it. Contact them first. We will help where we can, and we will refer your request to them where they are the right recipient.

3. Whose Information We Handle
Agents, solicitors and mortgage brokers who hold a Realey account.Buyers and other parties to a transaction, including parties invited by email who take part without creating an account.Staff of a subscribing agency or firm whose employer has given them access under that account.Visitors to realey.au who have not signed up.

What We Collect From Account Holders:
Identity and contact details: name, business name, email, phone, postal address.Professional credentials: licence or practising certificate number, ACL or credit representative number, specialisations, firm or agency. Profile content you publish: stats, recent deals, biography, reviews received.Billing information: subscription plan, exchanges billed, invoices, payment history.Account and access records: log in times, IP address, device and browser, permissions held.

From buyers and invited parties: Name, email, phone. Identity verification documents where a party to the transaction requires them, which may include a driver licence, passport or Medicare card. Offer and bid history, including amounts, timestamps and outcome. Deposit and payment details, handled by our payment provider as described in section 8. Signatures, and the audit trail attached to them. Messages you send in a deal chat. Documents you upload to a matter. Approvals you record, and the time you recorded them.

From Everyone:
Website analytics: pages viewed, referring page, approximate location derived from IP, session activity.Enquiry and early access form submissions, including any letter of intent you sign.

Sensitive Information:
‍Some information in a property transaction is sensitive or is treated as such by law, including government identifiers on identity documents and financial information.We collect it only where it is reasonably necessary for the transaction, and only with your consent or where the law otherwise permits it.We do not use government identifiers as our own identifier for you.

5. Information About you that someone else gives us:
A party to a transaction can invite you to a deal by email. When they do, they give us your name and email address before you have had any contact with us.An agent, solicitor or broker may upload documents to a matter that contain your personal information.Where we collect your information from someone other than you, we take reasonable steps to notify you of the matters in this policy at or before the time of collection, ordinarily in the invitation email.If you have received an invitation and do not want to take part, do not action the invitation, and contact us at management@realey.au. We will tell the inviting party and remove your contact details from the deal, unless we are required to retain them.You can take part in a deal without creating an account. If you do, we still hold the information above, and this policy still applies to you.

6. Why we collect and use it?
To create and administer your account and set the permissions attached to your role.To run the transaction: listings, timed auctions, fixed price offers, chat, signatures, approvals, documents, calendars and bookings.To prompt each party when it is their turn, and to show real time progress to the parties entitled to see it.To handle deposits and payments.To maintain the audit trail attached to a signature, an approval or a bid, which is a record of who did what and when.To bill you, and to collect what you owe.To publish your professional profile where you have chosen to publish one, and to place it in front of a party who is appointing a solicitor or broker.To verify identity and credentials, and to prevent fraud.To support you, and to investigate faults.To improve the platform, using aggregated or de-identified data wherever that is sufficient.To send you service messages you cannot opt out of while you hold an account, such as security notices and billing notices.To send you marketing, where section 10 permits it.To comply with our legal obligations.We do not sell your personal information.We do not use the documents, messages or transaction content you put into a deal to train or tune machine learning models.

7. Automated decisions:
Realey uses automated workflows that prompt each party when a step falls to them, and that move a matter between stages when a condition is met.These workflows sequence and notify. They do not decide the commercial outcome of a transaction, and they do not accept, reject or rank an offer on any party's behalf. A person makes those decisions.Timed auctions apply the auction rules disclosed to bidders before bidding opens, including how the highest bid is determined and how the close time is applied.

8. Who we disclose it to
Other parties in your transaction:
Realey works by putting the four parties on one platform, so information in a deal is visible to the other parties to that deal, according to the permissions attached to each role.What each role can see is set out at realey.au/permissions. Check it before you upload anything.Anything you post in a deal chat is visible to the participants in that chat. It is not private to you.

To our service providers:
‍We engage third parties to provide parts of the service. The kinds of providers we use are:Cloud hosting and storage: Amazon Web Services, in the Sydney region.Payment and deposit processing.Identity verification, where a transaction requires it.Electronic signature and audit trail.Email and notification delivery.Website and product analytics. Customer support, error monitoring and logging.We disclose personal information to these providers only so far as they need it to perform that function, and we require them to handle it only for the purpose we engaged them for. We maintain a current list of our service providers and will supply it on request to management@realey.au.
‍

Otherwise:
To a professional you ask us to refer you to, or whom you contact through a profile. We disclose your enquiry and contact details so they can respond.To our professional advisers, insurers and auditors.To a purchaser or investor in connection with a sale, merger or fundraising, under confidentiality, and subject to the buyer continuing to handle your information under this policy.Where required or authorised by law, including to a court, a regulator or a law enforcement agency.

9. Referrals, Featured Profiles and Advertising
Realey shows professional profiles to a party at the point they are appointing a solicitor or broker.Some placement is paid. Where a profile is featured because the professional has paid for placement, we identify it as such.If you contact a professional through Realey, or accept a referral, we disclose your name, contact details and the transaction context to them so they can act on it.We may be paid a referral fee for that introduction. Being paid does not change what we disclose about you.

10. Marketing:
We may send you marketing about Realey where you are an account holder, where you have asked us to, or where you would reasonably expect it.Every marketing message carries an unsubscribe function, and we action unsubscribes promptly.We do not send marketing to a buyer or invited party on behalf of a third party without consent.Unsubscribing from marketing does not stop service messages about a live transaction.

11. Overseas Disclosure
We host in the AWS Sydney region, so personal information in a deal is stored in Australia.Some of our service providers, or their own sub-providers, may store or access personal information outside Australia. Where that happens, the recipients are likely to be located in the United States and in other countries where those providers operate.Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure the recipient does not breach the Australian Privacy Principles in relation to it.You can ask us at management@realey.au which of our providers hold or access information outside Australia.

12. Security
We hold your information on infrastructure operated by Amazon Web Services in the Sydney region.We take reasonable steps to protect it from misuse, interference, loss, and unauthorised access, modification or disclosure. Those steps include:Role based access controls, so each party sees only what their role permits.Access to production systems limited to personnel who need it, on a least privilege basis.Multi factor authentication on administrative access.Audit logging of access and of actions taken on a matter.Regular backups.Confidentiality obligations on our personnel, and privacy training.Assessment of the security practices of our service providers before we engage them.Realey does not currently hold ISO 27001 certification. Amazon Web Services maintains its own certifications for the infrastructure layer it operates. We will update this policy if our position changes.No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Data Breaches
We have a response plan for suspected data breaches.If a breach is likely to result in serious harm to you and we cannot prevent that harm, we will notify you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.If the breach affects information a professional put into a deal, we will also notify that professional so they can meet their own obligations.

14. Cookies and the Website
Realey.au uses cookies and similar technologies to make the site work, to remember your preferences, and to measure how the site is used.Our public pages retrieve data from our backend when they load. That request includes your IP address.You can block or delete cookies in your browser. Some parts of the site may not work if you do.

15. Retention and Getting Your Data Out
We keep personal information only as long as we need it for the purposes in this policy, or as long as the law requires.Transaction records, including signature audit trails, approvals and bid history, are kept for 7 years after exchange. These records evidence what was agreed and by whom, so they are retained even after an account closes.Billing records are kept for at least 5 years, as tax law requires.Marketing contact records are kept until you unsubscribe, then we keep enough to honour the unsubscribe.If you close your account, you can request an export of your data. We provide it within 30 days of the request, in a commonly used machine readable format, and the export link stays available for 30 days. Requests must be made within 30 days of the account closing.When we no longer need information and are not required to keep it, we destroy it or de-identify it.

16. Access and Correction
You can ask for access to the personal information we hold about you, and you can ask us to correct it.Contact management@realey.au. We will ask you to verify your identity.We respond within 30 days. Access is free, though we may charge for the reasonable cost of supplying it in an unusual format.We may refuse access in the limited circumstances the Privacy Act allows, for example where giving access would unreasonably affect another person's privacy. If we refuse, we will tell you why and how to complain.Where the information sits in a deal and was put there by a professional, we may need to refer your request to them. We will tell you if we do.Where we correct information that we have already disclosed, we will tell the recipient if you ask us to, unless it is impracticable or unlawful.

17. Complaints
If you think we have breached the Australian Privacy Principles, contact management@realey.au and set out what happened.We will acknowledge within 5 business days and respond within 30 days.If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner: oaic.gov.au, 1300 363 992, GPO Box 5218 Sydney NSW 2001.

18. Contact Us:
Privacy enquiries: management@realey.au
‍Post: 490 Northbourne Avenue, Dickson ACT 2602

19. Changes to this Policy
We may update this policy. The current version is always at realey.au/privacy, with the date it took effect at the top. If a change materially affects how we handle your information, we will tell account holders before it takes effect.